GEN008160 - If the system is using LDAP for authentication or account information, the TLS certificate authority file and/or directory (as appropriate) must be group-owned by root, bin, sys, or system - /etc/ssl/ca.cert

Information

LDAP can be used to provide user authentication and account information, which are vital to system security. The LDAP client configuration must be protected from unauthorized modification.

Solution

Change the group ownership of the file or directory.

# chgrp root <certpath>

See Also

https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_Oracle_Linux_5_V2R1_STIG.zip

Item Details

Category: ACCESS CONTROL, CONFIGURATION MANAGEMENT

References: 800-53|AC-6, 800-53|CM-6b., CAT|II, CCI|CCI-000225, CCI|CCI-000366, Rule-ID|SV-218701r603259_rule, STIG-ID|GEN008160, STIG-Legacy|SV-63291, STIG-Legacy|V-22564, Vuln-ID|V-218701

Plugin: Unix

Control ID: c2ec89a75fe6bd2c94e22e8ebd05d984212654a02234fd24ea1b5e40ce242be0